The subElementRect returned for those controls are already flipped. (cherry picked from commit b9a523a8)